# GET /api/payment-tokenization/wallet-providers/paze/jwks/{environment}

Admin preview of an environment's JWKS, for verifying it before registering the URL with Paze.

404 when the environment's key ids are unset or its certificate has not been generated yet.

**Operation ID:** `GET_api_payment-tokenization_wallet-providers_paze_jwks_environment`

## Authorization

Requires: PaymentTokenization.SettingManagement, merchant scope.

Required permissions:
- `PaymentTokenization.SettingManagement`

## Parameters

| Name | In | Required | Type | Description |
| --- | --- | --- | --- | --- |
| environment | path | yes | WinkPGPaymentTokenizationPazeCertificatesPazeCertificateEnvironment | Paze environment a certificate belongs to. Sandbox self-signs; Production is CA-issued (CSR + merge). |
| suppressNulls | query | no | boolean | If true, omit properties with null values. |

## Responses

### 200

OK

**Content type:** `text/plain`

Schema: `WinkPGPaymentTokenizationWalletProviderRegistrationsPazeJwksDto`

**Content type:** `application/json`

Schema: `WinkPGPaymentTokenizationWalletProviderRegistrationsPazeJwksDto`

**Content type:** `text/json`

Schema: `WinkPGPaymentTokenizationWalletProviderRegistrationsPazeJwksDto`

### default

The request failed. The body carries the standard error envelope: a machine-readable `error.code`, a human-readable `error.message`, and `error.validationErrors` when the failure was a validation rejection. See the error-code reference in this document's description for the values `error.code` can take.

**Content type:** `application/json`

Schema: `WinkPGHttpRemoteServiceErrorResponse`

## See also

- [All documentation](https://docs.winkpg.io/llms.txt): the machine-readable index of every public page on this site.